A hitherto unknown group of attackers has used legitimate certificates signed by Microsoft to attack companies in Asia, the security firm Symantec cla.
The long-established group – described as a “highly skilled financial threat actor” – is wielding a new variant of the Sardonic backdoor malware as it switches specialties from POS attacks to ransomware.
Security researchers say they have recently observed a Russian hacking crew, who were behind the destructive WhisperGate malware cyberattacks, targeting Ukraini